172 matches found
cve-2019-6207
CVE-2019-6207 $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct rtmsghdr rtm = stru...
CVE-2026-97598
A flaw was found in the Linux kernel's IPv4 routing subsystem. This vulnerability allows a local user with network configuration privileges to cause a Denial of Service DoS. When automatic routing table identifier allocation is requested, the kernel searches through table identifiers without an...
DEBIAN-CVE-2026-97974
In the Linux kernel, the following vulnerability has been resolved: ipv6: null-check fib6node before accessing in ip6delrtsiblings syzbot reported a null-ptr-deref in ip6delrtsiblings 0. The stack trace hinted towards a null dereference of rt-fib6node when fn-leaf is accessed in ip6delrtsiblings...
CVE-2026-97939
In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...
CVE-2026-97974
The Linux kernel contains a null-pointer dereference vulnerability within the ipv6 networking stack, specifically in the __ip6_del_rt_siblings() function. The issue occurs because rt->fib6_node can be set to NULL by a concurrent thread (e.g., when replacing an ECMP route via RTM_NEWROUTE with ...
CVE-2026-97939 ipmr: account multicast table and route memory
In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...
Linux Distros Unpatched Vulnerability : CVE-2026-97974
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: null-check fib6node before accessing in ip6delrtsiblings syzbot reported a null-ptr-deref in ip6delrtsiblings 0. The stack trace hinted towards a null...
CVE-2026-97939: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRTTABLE and MRT6TABLE. Each unseen id allocates an mrtable via the shared mrtablealloc...
PT-2026-98603
In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory A netadmin in a user+net namespace can create many IPv4 and IPv6 multicast routing tables with MRT TABLE and MRT6 TABLE. Each unseen id allocates an mr table via the shared mr table...
EUVD-2026-81581
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rankip and rankport values to redirect decode workers to...
CVE-2026-92972: Missing Authentication for Critical Function
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rankip and rankport values to redirect decode workers to...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: net: dsa: Free routing table on probe failure If complete is set to true in dsatreesetup, it means that we are the last switch in the tree that is being probed successfully. We should then set up all switches along our probe path...
PT-2026-83207
Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.748 B20211015 Description Incorrect access control in the getMeshRoutingTable function allows unauthenticated attackers to obtain mesh routing information. This is achieved by sending a crafted POST request to the...
UBUNTU-CVE-2026-64572
In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa wit...
PT-2026-61286
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop can occur in the rt6 fill node function. This happens when writers holding the tb6 lock use list del rcu on rt-fib6 siblings without waiting for RCU readers. Consequentl...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37786)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37786 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe...
MiracleLinux 8 : NetworkManager-1.40.16-18.el8_10.ML.1 (AXSA:2025-9552:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9552:02 advisory. Security and Bug Fixes: NetworkManager: DHCP routing options can manipulate interface-based VPN traffic CVE-2024-3661 Route to VPN server not stored in routi...
EUVD-2018-5853
Malware in sbrugna...